$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/98c9fd25-814a-40ed-8d3b-6139d91c1899.roa File: 98c9fd25-814a-40ed-8d3b-6139d91c1899.roa (raw, json) Hash identifier: xYvJ9LUtbh0PIf/w7kDAQFpkUQbgv/Uuf4dMR5B3ylw= Subject key identifier: 75:30:18:99:0F:97:00:91:CD:1D:7C:99:C3:98:6B:9B:1F:7E:09:04 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7B63950B459A1187155B49D9104918E243FA0385 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/98c9fd25-814a-40ed-8d3b-6139d91c1899.roa Signing time: Mon 30 Jun 2025 16:40:14 +0000 ROA not before: Mon 30 Jun 2025 16:40:14 +0000 ROA not after: Mon 04 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.4.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:63:95:0b:45:9a:11:87:15:5b:49:d9:10:49:18:e2:43:fa:03:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 30 16:40:14 2025 GMT Not After : Aug 4 23:59:59 2025 GMT Subject: serialNumber=fdaac7efe66d08d60102c43c3e466c688d09c0125945f77016eac9c8f6b09368, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:04:5f:97:94:d4:f4:70:ad:a5:99:8b:d1:9a: c9:17:fc:b3:5e:4b:cd:8e:d8:ce:13:fa:23:a8:18: e5:4d:d1:cc:ea:ae:73:76:9c:ae:98:1e:39:b8:6d: e2:84:57:8d:59:ed:c1:ba:59:15:f8:d0:25:e6:c5: d4:94:30:77:65:a9:f6:1f:89:65:91:32:31:fe:d0: c6:79:5f:23:f6:95:bc:04:b9:bd:cc:0d:7f:3f:de: ee:65:21:a1:ad:f2:78:4f:6e:04:73:dc:ad:ad:75: c6:e2:ab:0e:f8:4b:77:5d:f3:c0:45:d7:9c:fd:4c: c3:73:05:e9:5e:30:4c:aa:91:6d:bd:57:5b:3c:c9: a7:58:8d:79:6b:93:ee:a6:e8:32:7a:88:af:72:f3: b4:aa:16:13:59:2e:bd:bf:1a:34:cd:eb:9d:3b:94: 1c:38:c1:f5:26:2a:98:f8:6a:84:ae:27:58:80:3b: 7a:33:a9:38:8f:7a:97:6c:dd:00:5b:7b:3a:ac:8e: be:a4:a3:1b:66:0a:b0:1f:a9:c6:31:12:08:b7:2e: c2:fd:bd:53:12:0b:49:a7:ab:5c:6f:93:d9:f2:94: 8f:6a:16:28:d9:7b:88:19:8c:d3:e8:a2:5d:59:36: 22:b4:5b:58:07:8d:d8:29:d2:0c:2d:51:db:51:89: 02:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:30:18:99:0F:97:00:91:CD:1D:7C:99:C3:98:6B:9B:1F:7E:09:04 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/98c9fd25-814a-40ed-8d3b-6139d91c1899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.4.0.0/14 Signature Algorithm: sha256WithRSAEncryption 03:90:7f:84:37:52:33:58:31:ab:53:41:cd:6f:50:63:d8:c7: 54:e6:8b:0f:e1:8e:a2:8f:12:50:48:61:34:d9:46:8e:71:b4: e8:76:66:8e:d2:96:7e:c6:24:c8:f9:0c:25:81:f7:7d:66:81: 45:7e:46:4f:68:cb:e2:9d:8f:2d:2d:af:22:f4:7f:54:54:19: a3:ea:e9:57:c6:02:e7:d9:0d:0f:91:00:bd:8c:db:d3:41:46: ee:b8:2b:9e:79:52:bd:0d:b5:fe:94:cc:c0:a7:54:44:2f:ed: 01:3c:ba:d3:ca:ff:25:65:ab:f1:72:24:0b:d2:4e:b9:17:61: 98:56:06:c3:d3:54:dd:45:cc:0c:82:b1:5c:51:90:a6:e9:2c: 9c:aa:3d:0e:21:14:86:d1:53:5a:9f:ac:d7:aa:6f:4a:e2:e2: 9f:06:63:0b:62:7f:d6:2e:f6:9f:02:17:50:86:eb:21:3c:f3: b7:68:59:7b:c9:7a:32:5d:39:d8:6c:da:dd:cd:45:66:27:9a: 78:b8:a2:f0:0d:2d:e5:5d:c3:17:0d:62:6e:d1:ab:79:a1:53: f4:d6:12:0c:ad:eb:a9:7a:c1:55:55:67:00:b5:8c:2e:85:10: e9:5e:44:b0:e6:ae:89:4d:0e:f4:2d:a2:bd:90:b7:59:ee:3a: e7:14:7a:56 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUe2OVC0WaEYcVW0nZEEkY4kP6A4UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjMwMTY0MDE0WhcNMjUwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZGFhYzdlZmU2NmQwOGQ2MDEwMmM0M2MzZTQ2NmM2ODhk MDljMDEyNTk0NWY3NzAxNmVhYzljOGY2YjA5MzY4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKBF+XlNT0cK2lmYvRmskX/LNeS82O2M4T+iOoGOVN0czq rnN2nK6YHjm4beKEV41Z7cG6WRX40CXmxdSUMHdlqfYfiWWRMjH+0MZ5XyP2lbwE ub3MDX8/3u5lIaGt8nhPbgRz3K2tdcbiqw74S3dd88BF15z9TMNzBeleMEyqkW29 V1s8yadYjXlrk+6m6DJ6iK9y87SqFhNZLr2/GjTN6507lBw4wfUmKpj4aoSuJ1iA O3ozqTiPepds3QBbezqsjr6koxtmCrAfqcYxEgi3LsL9vVMSC0mnq1xvk9nylI9q FijZe4gZjNPool1ZNiK0W1gHjdgp0gwtUdtRiQJdAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUdTAYmQ+XAJHNHXyZw5hrmx9+CQQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk4YzlmZDI1LTgxNGEtNDBlZC04ZDNiLTYxMzlkOTFjMTg5OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwI0BDANBgkqhkiG9w0BAQsFAAOCAQEAA5B/hDdSM1gxq1NBzW9QY9jHVOaL D+GOoo8SUEhhNNlGjnG06HZmjtKWfsYkyPkMJYH3fWaBRX5GT2jL4p2PLS2vIvR/ VFQZo+rpV8YC59kND5EAvYzb00FG7rgrnnlSvQ21/pTMwKdURC/tATy608r/JWWr 8XIkC9JOuRdhmFYGw9NU3UXMDIKxXFGQpuksnKo9DiEUhtFTWp+s16pvSuLinwZj C2J/1i72nwIXUIbrITzzt2hZe8l6Ml052Gza3c1FZieaeLii8A0t5V3DFw1ibtGr eaFT9NYSDK3rqXrBVVVnALWMLoUQ6V5EsOauiU0O9C2ivZC3We465xR6Vg== -----END CERTIFICATE-----Generated at Tue Jul 1 04:36:23 2025 by rpki-client